EUVD-2025-52253

Malicious code in ripe-silver-whippet npm...

EUVD-2025-52254

Malicious code in ripe-peach-swordfish npm...

EUVD-2025-52256

Malicious code in ripe-gray-aardwolf npm...

MAL-2025-70395 Malicious code in ripe-peach-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba900152f25b1d7af6174ec42b7ef90aaf972514751f851a439e969fbb795c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52255

Malicious code in ripe-magenta-tahr npm...

Malicious code in ripe-gray-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259054ced66bdcdd5ea38fc0eda3866697eeab41654eaaf794f3eecf87f9117d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49457

Malicious code in ripetoucanz3n npm...

EUVD-2007-2202

Malware in sbrugna...

EUVD-2007-3509

Malware in sbrugna...

EUVD-2007-2201

Malware in sbrugna...

EUVD-2007-4506

Malware in sbrugna...

EUVD-2007-4505

Malware in sbrugna...

Malicious code in ripe-grs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9dcae56aa553fbd3ac26d68ec192342012f6cdf9d82443a1cc08f76d037c1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5001 Malicious code in ripe-grs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9dcae56aa553fbd3ac26d68ec192342012f6cdf9d82443a1cc08f76d037c1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-16163

An issue was discovered in RIPE NCC RPKI Validator 3.x before 3.1-2020.07.06.14.28. RRDP fetches proceed even with a lack of validation of a TLS HTTPS endpoint. This allows remote attackers to bypass intended access restrictions, or to trigger denial of service to traffic directed to co-dependent...

CVE-2020-16164

An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent routing systems by strategically withholding RPKI Route Origin Authorisation ".roa" files or X509...

CVE-2020-16162

An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. Missing validation checks on CRL presence or CRL staleness in the X509-based RPKI certificate-tree validation procedure allow remote attackers to bypass intended access restrictions by using revoked certificates...

Orange Spain Faces BGP Traffic Hijack After RIPE Account Hacked by Malware

Mobile network operator Orange Spain suffered an internet outage for several hours on January 3 after a threat actor used administrator credentials captured by means of stealer malware to hijack the border gateway protocol BGP traffic. "The Orange account in the IP network coordination center RIP...

phpIPAM header injection vulnerability

phpIPAM is an open source PHP and MySQL-based IP address management application IPAM. phpIPAM version 1.5.0 is vulnerable to header injection, which stems from a lack of validation of input data in component/admin/subnets/ripe-query.php, and can be exploited by attackers to cause header injection...

phpIPAM <= 1.5.2 SSRF Vulnerability

phpIPAM is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...